3299 matches found
merriam-webster.com Cross Site Scripting vulnerability OBB-1081690
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| merriam-webster.com ---|--- Open Bug...
The DOJ Is Finally Suing US Telecom Providers for Robocalls
The defendants have allegedly connected hundreds of millions of fraudulent robocalls to US residents...
Announcing the Xbox Bounty program
We are pleased to announce the launch of the Xbox Bounty program today. The Xbox bounty program invites gamers, security researchers, and technologists around the world to help identify security vulnerabilities in the Xbox network and services, and share them with the Microsoft Xbox team through...
The US Space Force Has a Rough Launch on the Internet
From controversy over camo print to Star Trek comparisons, the new military branch can't buy a break online...
U.S. Gov Agency Targeted With Malware-Laced Emails
A U.S. government agency was targeted with spear phishing emails harboring several malware strains – including a never-before-seen malware downloader that researchers call “Carrotball.” The campaign, which researchers observed occurring from July to October and code-named “Fractured Statue,”...
Threat Source newsletter (Jan. 16, 2019)
Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. This wasn’t your average Patch Tuesday. Microsoft’s monthly security update was notable for a few reasons. For starters, it’s really tim...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-2404)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Jeff Bezos’ Hacked Phone, Coronavirus Hits the US, and More News
Catch up on the most important news from today in two minutes or less...
Brazil Charges Glenn Greenwald with Cybercrimes
Glenn Greenwald has been charged with cybercrimes in Brazil, stemming from publishing information and documents that were embarrassing to the government. The charges are that he actively helped the people who actually did the hacking: Citing intercepted messages between Mr. Greenwald and the...
This Week in Security News: The First Patch Tuesday Update of 2020 and Pwn2Own Vancouver Announced
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about a major crypto-spoofing bug impacting Windows 10 that has been fixed as part of Microsoft’s January Patch Tuesday update. Also,...
UN Secretary-General: US-China Tech Split Worse Than Cold War
In an interview with WIRED editor in chief Nicholas Thompson, António Guterres says the world's next major conflict will start in cyberspace...
If Russia Hacked Burisma, Brace for the Leaks to Follow
The Kremlin likely hacked the oil giant. Its next play: selectively release—and even forge—documents. Did the US learn enough from 2016 to ignore them?...
0day RCE in Firefox
This seems like a pretty interesting vulnerability CVE-2019-17026 in Firefox and Thunderbird in Windows, MacOS and Linux. "Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this...
SQL Injection Vulnerability in Cloud CMS Backend us***.php File
Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the us.php file in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...
Police Surveillance Tools from Special Services Group
Special Services Group, a company that sells surveillance tools to the FBI, DEA, ICE, and other US government agencies, has had its secret sales brochure published. Motherboard received the brochure as part of a FOIA request to the Irvine Police Department in California. "The Tombstone Cam is our...
Iranian Hackers Have Been ‘Password-Spraying’ the US Grid
A state-sponsored group called Magnallium has been probing American electric utilities for the past year...
How the US Knew Iranian Missiles Were Coming Before They Hit
The US has operated an extensive network of missile warning systems for over half a century, but next-generation missiles will put it to the test...
Iranian hackers deface US government & African bank website
By Waqas Iranian hackers are back in action and this time they have found targets in the US and Africa. Here's what happened: This is a post from HackRead.com Read the original post: Iranian hackers deface US government & African bank website...
SQL injection vulnerability in the us***.php page of Xi'an BaiLian Network Technology Co.
Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. web mall station building system v3.0 front us.php page SQL injection...